Solved

Search all GPOs at once

Posted on 2007-03-19
7
214 Views
Last Modified: 2012-05-05
I am using Windows Server 2003 Standard Edition, SP1 and I was wondering if there is any way to search all my GPOs at once?  I have a policy that is pushing a PowerUser group but I have no idea which policy it is.  Thanks!
0
Comment
Question by:cnalley
  • 3
  • 2
  • 2
7 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 18751971
Wait for Longhorn!  LOL....

Unfortunately, this is the pain point of GPOs - right now there is no easy way to do this.  You can run GPRESULT on the client machine and see exactly what policies are being applied to that workstation.  It's under the Computer Configuration.

0
 

Author Comment

by:cnalley
ID: 18752032
Thanks Netman66!

How about a third-party application.  Does anyone know of some add-on that can search all the GPOs for a phrase or something?  
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18752142
you can run rsop.msc on any machine within the domain and it will show you which policy is forcing the setting......it will only show policies that apply to itself however
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:cnalley
ID: 18752647
Thanks Jay Jay,
rsop only works for policies set with the standard settings.  We are using Policy Maker Pro which extends GPOs and they do not show in rsop so we really need something that will actually search through all the GPOs.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18752692
this is true :) sorry i didnt think about that little fact :)
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 18752840
All the settings are simple INI's that are stored in SYSVOL\domain\policies - you may get a script to look at each for Restricted Groups - it'll only be present if the setting has been made.

Once found, then the GUID of the policy is the foldername and can be found in ADUC with Advanced turned on.

0
 

Author Comment

by:cnalley
ID: 18757499
You are a genius Netman!  Thank you so much.  

I'm using GPMC so I had to go to Group Policies and look at each one to find the GUID of the policy I was looking for but that was a much easier needle find in my haystack of GPOs.

0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question